mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 13:08:40 +08:00
#### Description Category search accepted an unbounded term from anonymous requests and expanded every whitespace-separated word into an ILIKE predicate. Large terms could generate expensive SQL and tie up request workers. #### Fix Cap the total term length and the number of words used for SQL filters. |
||
|---|---|---|
| .. | ||
| assets | ||
| controllers | ||
| helpers | ||
| jobs | ||
| mailers | ||
| models | ||
| queries/reports | ||
| serializers | ||
| services | ||
| views | ||